CVE-2026-81294

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81294 CVE-2026-81294 Authorizer 3.15.1 - Paul Ryan I am @abraxasnull. Loopback lab. The client is CVE-2026-81294-Abraxas-Labs.py. Unverified email is enough. 3.15.1 maps GitHub emails to entry.email without...

CVE-2026-103752-Authorizer-Privilege-Escalation

This repository does not have a README...

Exploit for CVE-2026-103752

CVE-2026-103752: Unauthenticated Privilege Escalation in WordP...

WordPress Authorizer 3.15.3 Privilege Escalation Scanner

WordPress Authorizer versions through 3.15.3 contain an unauthenticated privilege escalation vulnerability. The supplied Python tool passively detects installed versions and optionally inspects Azure OAuth2 configuration...

CVE-2026-103752

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

CVE-2026-103752 WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

EUVD-2026-90851

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

CVE-2026-103752 WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

CVE-2026-103752

The WordPress Authorizer plugin versions

WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Raphael P. Cigana in WordPress Plugin Authorizer versions = 3.15.3...

CVE-2026-103752: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

PT-2026-103880

Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 3.16.0 Description An unauthenticated privilege escalation issue exists in the Authorizer plugin, allowing an attacker to gain elevated privileges without providing credentials. Recommendations Update to version...

ironflock (>=0.1.0, <=1.0.9), nucypher (6.1.0) +3 more potentially affected by CVE-2026-77528 via autobahn (22.3.2)

autobahn PYPI version 22.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - ironflock =0.1.0, =0.0.11, =0.0.19 - tahoe-lafs 1.18.0 - zero-knowledge-access-pass-authorizer 2022.8.21 Source cves: CVE-2026-77528 Source...

Exploit for CVE-2026-81294

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-94224

Name of the Vulnerable Software and Affected Versions Eclipse Ankaios versions 0.6.0 through 1.0.3 Description In the agent control-interface authorizer, the LogRule::matches function stops processing at the first wildcard pattern encountered within a single rule instead of evaluating subsequent...

CVE-2026-50157

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-50157

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-50157: Use of GET Request Method With Sensitive Query Strings

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-54072

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...

CVE-2026-54072 Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...